[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-senior-analyst-it-information-security-python-security-automation3377-allianz-insurance-de-in":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":12,"featured_until":7,"is_active":13,"deactivated_at":7,"is_enriched":13,"processed_job_posting_json":14,"processed_latitude":78,"processed_longitude":79,"processed_employment_types":80,"processed_working_hours":81,"processed_working_hours_labels":83,"processed_home_office":84,"processed_salary_min":75,"processed_salary_max":76,"processed_salary_currency":72,"processed_salary_source":85,"processed_benefits":86,"processed_benefits_labels":87,"processed_industry":88,"processed_skills":7,"processed_job_location":89,"processed_full_address_gmaps":93,"processed_street_gmaps":94,"processed_city_gmaps":95,"processed_postal_code_gmaps":96,"processed_country_gmaps":98,"processed_country_iso_code_gmaps":100,"full_description":17,"formatted_description":101,"processed_employment_types_labels":47,"processed_home_office_labels":45,"processed_industry_labels":49,"processed_it_skills":102,"processed_it_skills_labels":106,"processed_soft_skills":107,"processed_soft_skills_labels":108,"processed_job_expertise_skills":109,"processed_job_expertise_skills_labels":110,"processed_language_requirements":111,"processed_total_experience_years":104,"processed_professional_field":118,"processed_professional_field_labels":121,"processed_leadership_role":12,"processed_date_posted":20,"raw_job_url":122,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":88,"canonical_industry_label":49,"max_cpc":123,"actual_cpc":7},91135,"senior-analyst-it-information-security-python-security-automation3377-allianz-insurance","Senior Analyst-IT & Information Security- Python Security Automation_3377",null,{"name":9,"slug":10,"logo_url":11},"Allianz Insurance","allianz-insurance","https:\u002F\u002Fcdn.phenompeople.com\u002FCareerConnectResources\u002FAISAIPGB\u002Fimages\u002FHeader-1706868786965.svg",false,true,{"@context":15,"@type":16,"title":6,"description":17,"hiringOrganization":18,"datePosted":20,"validThrough":21,"jobLocation":22,"jobLocationType":45,"employmentType":46,"industry":48,"skills":50,"baseSalary":70},"https:\u002F\u002Fschema.org\u002F","JobPosting","\u003Cp>The Automation Engineer is the operational backbone of the ‘Detection Cluster’ in Allianz Cyber Defense Center (ACDC). The role is responsible for building and maintaining the SOAR playbooks and Google SecOps workflows that allow the ACDC to handle security cases at scale — centralized and as automated as possible.The engineer will integrate Google SecOps SIEM with CrowdStrike EDR, automate the end-to-end security case lifecycle, and continuously reduce manual effort across the security operations team.\u003C\u002Fp>\u003Cp>\u003Cstrong>Experience, Technical and Functional Skills\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>\u003Cstrong>Core Responsibilities:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul>\u003Cli>Build, maintain, and optimize SOAR playbooks within Google SecOps to automate security case triage, investigation, and remediation.\u003C\u002Fli>\u003Cli>Integrate Google SecOps SIEM with CrowdStrike EDR and other data sources for seamless alert ingestion and correlation.\u003C\u002Fli>\u003Cli>Automate the full security case lifecycle: log ingestion → alert creation → triage → true\u002Ffalse positive classification → Archer incident creation or case closure.\u003C\u002Fli>\u003Cli>Develop Python scripts and automation workflows to reduce manual analyst touchpoints across the ACDC.\u003C\u002Fli>\u003Cli>Integrate REST APIs with third-party security tools for orchestration and enrichment.\u003C\u002Fli>\u003Cli>Troubleshoot and improve existing SOAR playbooks and automation pipelines.\u003C\u002Fli>\u003C\u002Ful>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cstrong>Primary Skills:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul>\u003Cli>Google SecOps (Chronicle SIEM + SOAR) — hands-on experience building and managing SOAR playbooks.\u003C\u002Fli>\u003Cli>Python scripting (Mandatory) — for automation, playbook actions, and security workflow development.\u003C\u002Fli>\u003Cli>CrowdStrike EDR understanding is a plus for integration with Google SecOps SIEM for alert ingestion and automated response.\u003C\u002Fli>\u003Cli>REST API (Mandatory) - integration with security tools (EDR, ticketing, threat intelligence platforms).\u003C\u002Fli>\u003Cli>Security case lifecycle automation — from log ingestion through triage to Archer incident creation or closure.\u003C\u002Fli>\u003Cli>Git — version control for automation code and SOAR configurations.\u003C\u002Fli>\u003Cli>Exposure in AI ,Agentic AI,Gen AI is preferrable\u003C\u002Fli>\u003C\u002Ful>\u003Cp> \u003C\u002Fp>\u003Cp>\u003Cstrong>Good to Have:\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul>\u003Cli>CI\u002FCD tools (Jenkins, GitHub Actions) for deploying SOAR automation updates.\u003C\u002Fli>\u003Cli>Entry-level security certification (CompTIA Security+ or equivalent).\u003C\u002Fli>\u003Cli>Basic cloud knowledge (AWS or Azure) for security tool integrations.\u003C\u002Fli>\u003Cli>Familiarity with Grafana or similar for SOC metrics dashboards.\u003C\u002Fli>\u003C\u002Ful>\u003Cp>\u003Cstrong>Qualifications\u003C\u002Fstrong>\u003C\u002Fp>\u003Cp>\u003Cstrong>Education: \u003C\u002Fstrong>Bachelor’s \u002F Master’s full-time degree in a Technical stream.\u003C\u002Fp>\u003Cp>\u003Cstrong>Experience: \u003C\u002Fstrong>3 to 5 years of hands-on experience in security operations, security automation, or a SOC\u002FSIEM engineering role — with demonstrated expertise in building SOAR playbooks, scripting automation workflows, and integrating security tools via REST APIs.\u003C\u002Fp>\u003Cp> \u003C\u002Fp> \u003Cp>Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust. \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>Join us\u003Cstrong>. Let's care for tomorrow.\u003C\u002Fstrong>\u003C\u002Fp>",{"@type":19,"name":9},"Organization","2026-10-31","2027-10-31",[23,33,39],{"@type":24,"address":25,"geo":29},"Place",{"@type":26,"addressLocality":27,"addressCountry":28},"PostalAddress","PUNE","IN",{"@type":30,"latitude":31,"longitude":32},"GeoCoordinates",18.51957,73.85535,{"@type":24,"address":34,"geo":36},{"@type":26,"addressLocality":35,"addressCountry":28},"Trivandrum",{"@type":30,"latitude":37,"longitude":38},8.58298,76.88819,{"@type":24,"address":40,"geo":42},{"@type":26,"addressLocality":41,"addressCountry":28},"Sindewahi",{"@type":30,"latitude":43,"longitude":44},20.593684,78.96288,"HYBRID",[47],"PERMANENT",[49],"Insurance",[51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69],"Python","REST API","Google SecOps (Chronicle SIEM + SOAR)","CrowdStrike EDR","Git","CI\u002FCD tools (Jenkins, GitHub Actions)","Cloud (AWS or Azure)","Grafana","AI\u002FAgentic AI\u002FGen AI","Troubleshooting","Automation mindset","Security Operations","Security Automation","SOAR Playbook Development","SIEM Integration","Security Case Lifecycle Automation","Incident Response","Threat Intelligence Platforms","SOC Metrics",{"@type":71,"currency":72,"value":73},"MonetaryAmount","EUR",{"@type":74,"minValue":75,"maxValue":76,"unitText":77},"QuantitativeValue",70000,95000,"YEAR",[31,37,43],[32,38,44],"permanent",[82],"FULL_TIME",[82],"hybrid","estimated",[],[],"insurance",[90,91,92],"allianz, pune, india","allianz, 695581, trivandrum, india","allianz, sindewahi, india",[],[],[27,35,41],[97],"695581",[99],"India",[28],"The Automation Engineer is the operational backbone of the ‘Detection Cluster’ in Allianz Cyber Defense Center (ACDC). The role is responsible for building and maintaining the SOAR playbooks and Google SecOps workflows that allow the ACDC to handle security cases at scale — centralized and as automated as possible.The engineer will integrate Google SecOps SIEM with CrowdStrike EDR, automate the end-to-end security case lifecycle, and continuously reduce manual effort across the security operations team.\n\n**Experience, Technical and Functional Skills**\n\n**Core Responsibilities:**\n\n- Build, maintain, and optimize SOAR playbooks within Google SecOps to automate security case triage, investigation, and remediation.\n- Integrate Google SecOps SIEM with CrowdStrike EDR and other data sources for seamless alert ingestion and correlation.\n- Automate the full security case lifecycle: log ingestion → alert creation → triage → true\u002Ffalse positive classification → Archer incident creation or case closure.\n- Develop Python scripts and automation workflows to reduce manual analyst touchpoints across the ACDC.\n- Integrate REST APIs with third-party security tools for orchestration and enrichment.\n- Troubleshoot and improve existing SOAR playbooks and automation pipelines.\n\n**Primary Skills:**\n\n- Google SecOps (Chronicle SIEM + SOAR) — hands-on experience building and managing SOAR playbooks.\n- Python scripting (Mandatory) — for automation, playbook actions, and security workflow development.\n- CrowdStrike EDR understanding is a plus for integration with Google SecOps SIEM for alert ingestion and automated response.\n- REST API (Mandatory) - integration with security tools (EDR, ticketing, threat intelligence platforms).\n- Security case lifecycle automation — from log ingestion through triage to Archer incident creation or closure.\n- Git — version control for automation code and SOAR configurations.\n- Exposure in AI ,Agentic AI,Gen AI is preferrable\n\n**Good to Have:**\n\n- CI\u002FCD tools (Jenkins, GitHub Actions) for deploying SOAR automation updates.\n- Entry-level security certification (CompTIA Security+ or equivalent).\n- Basic cloud knowledge (AWS or Azure) for security tool integrations.\n- Familiarity with Grafana or similar for SOC metrics dashboards.\n\n**Qualifications**\n\n**Education:** Bachelor’s \u002F Master’s full-time degree in a Technical stream.\n\n**Experience:** 3 to 5 years of hands-on experience in security operations, security automation, or a SOC\u002FSIEM engineering role — with demonstrated expertise in building SOAR playbooks, scripting automation workflows, and integrating security tools via REST APIs.\n\nAllianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.\n\nAt Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.\n\nWe therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.\n\nJoin us**. Let's care for tomorrow.**",{"git":103,"python":104,"grafana":105,"rest api":104,"crowdstrike edr":103,"ai\u002Fagentic ai\u002Fgen ai":105,"cloud (aws or azure)":105,"ci\u002Fcd tools (jenkins, github actions)":105,"google secops (chronicle siem + soar)":104},3,4,2,[51,52,53,54,55,56,57,58,59],{"troubleshooting":103,"automation mindset":103},[60,61],{"soc metrics":105,"siem integration":104,"incident response":103,"security automation":104,"security operations":104,"soar playbook development":104,"threat intelligence platforms":103,"security case lifecycle automation":104},[62,63,64,65,66,67,68,69],{"detected_language_jobad":112,"required":113},"en",[114],[115],{"language":116,"level":117},"ENGLISH","C1",[119,120],"Information and Communications Technology Service Managers","Software and Applications Developers and Analysts",[119,120],"https:\u002F\u002Fcareers.allianz.com\u002Fglobal\u002Fen\u002Fjob\u002F108390\u002Fsenior-analyst-it-information-security-python-security-automation-3377",1]